HIGH7.5PyPI
GHSA-48mj-p7x2-5jfm· CVE-2021-41104, PYSEC-2021-351Basic auth bypass in esphome
Modified: 5/4/2026
package
PyPI/esphome
pkg:pypi/esphome
MEDIUMPyPI
GHSA-4h3h-63v6-88qx· CVE-2026-23833, PYSEC-2026-1326ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
Modified: 7/7/2026
HIGH8.1PyPI
GHSA-5925-88xh-6h99· CVE-2024-29019, PYSEC-2026-1327ESPHome vulnerable to Authentication bypass via Cross site request forgery
Modified: 7/7/2026
HIGH7.2PyPI
GHSA-8p25-3q46-8q2p· CVE-2024-27081, PYSEC-2026-1328ESPHome vulnerable to remote code execution via arbitrary file write
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-9p43-hj5j-96h5· CVE-2024-27287, PYSEC-2026-1329esphome vulnerable to stored Cross-site Scripting in edit configuration file API
Modified: 7/7/2026
HIGH8.1PyPI
GHSA-mxh2-ccgj-8635· CVE-2025-57808, PYSEC-2026-1330ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Modified: 9/10/2026
—PyPI
PYSEC-2021-351· CVE-2021-41104, GHSA-48mj-p7x2-5jfmModified: 11/8/2023
—PyPI
PYSEC-2026-1326· CVE-2026-23833, GHSA-4h3h-63v6-88qxESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
Modified: 7/7/2026
HIGH8.1PyPI
PYSEC-2026-1327· CVE-2024-29019, GHSA-5925-88xh-6h99ESPHome vulnerable to Authentication bypass via Cross site request forgery
Modified: 7/7/2026
HIGH7.2PyPI
PYSEC-2026-1328· CVE-2024-27081, GHSA-8p25-3q46-8q2pESPHome vulnerable to remote code execution via arbitrary file write
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1329· CVE-2024-27287, GHSA-9p43-hj5j-96h5esphome vulnerable to stored Cross-site Scripting in edit configuration file API
Modified: 7/7/2026
HIGH8.1PyPI
PYSEC-2026-1330· CVE-2025-57808, GHSA-mxh2-ccgj-8635ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Modified: 7/7/2026